Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/f3Vf1n-kUZMJwYwhFgHoo2EvQFQ.roa
File: f3Vf1n-kUZMJwYwhFgHoo2EvQFQ.roa (raw, json)
Hash identifier: h+XQ3OaCYgX7HZ6BnWvx+ot9BxEcRxEdCFtf1HljWsM=
Subject key identifier: 7F:75:5F:D6:7F:A4:51:93:09:C1:8C:21:16:01:E8:A3:61:2F:40:54
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 085FF78D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/f3Vf1n-kUZMJwYwhFgHoo2EvQFQ.roa
Signing time: Sun 12 Jun 2022 00:19:04 +0000
ROA not before: Sun 12 Jun 2022 00:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140507021 (0x85ff78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 12 00:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f755fd67fa4519309c18c211601e8a3612f4054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:75:de:09:d4:22:34:0b:58:7f:e6:06:58:
df:d6:fb:44:a5:e4:a8:1d:c3:57:a3:0d:be:b6:0d:
88:94:80:b3:41:9f:af:c5:90:f1:25:47:f8:ca:d1:
ab:b0:35:f2:78:1b:b0:46:af:23:47:9e:3c:da:1c:
dc:78:8d:d1:28:f6:ba:2c:24:ab:2c:a5:4e:9b:39:
07:55:0c:33:46:c3:50:6c:34:fe:35:db:54:ab:05:
89:ee:0b:fa:fd:f5:9f:9d:20:15:08:58:c4:ff:2f:
09:d4:17:00:b6:5a:f4:89:a7:b6:e0:2f:3f:12:b8:
ea:da:63:43:87:5a:ab:35:84:a9:d4:7c:04:fd:e5:
a0:0f:ec:f1:a7:53:19:ec:46:a0:6a:a4:c8:9f:c9:
dc:60:00:cb:09:17:f6:67:e2:91:85:10:b0:a7:97:
b1:e6:7f:c6:56:36:16:b3:96:73:4e:6d:91:cd:97:
2d:2d:ad:57:0b:35:01:9a:c4:86:47:fd:5f:16:99:
61:12:8b:4c:b5:ad:3a:3a:48:c1:f3:02:72:9a:5f:
77:96:a1:5b:c7:ea:38:ed:8e:c6:ac:83:9a:c8:36:
99:51:69:9c:69:9b:ca:c9:ee:27:d9:92:be:f1:d6:
1d:ea:c3:5e:2a:df:e1:24:00:85:e3:21:39:3f:16:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:5F:D6:7F:A4:51:93:09:C1:8C:21:16:01:E8:A3:61:2F:40:54
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/f3Vf1n-kUZMJwYwhFgHoo2EvQFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
33:37:66:ba:6c:23:96:e5:6d:2e:f3:a8:3d:da:f1:24:4e:8f:
84:3f:33:ac:a9:81:44:68:d0:10:e0:99:3b:99:d0:10:74:fe:
c0:a3:62:a9:85:7e:b5:fc:86:c6:02:00:11:0d:8b:de:3c:87:
28:34:44:33:6c:7c:56:d6:39:da:c4:1d:79:bd:96:cf:79:19:
55:00:5f:08:7d:00:b7:04:39:17:b4:14:31:e6:28:c6:44:76:
e6:49:24:e4:de:5d:e7:57:3e:7f:71:ef:85:39:54:16:dd:36:
b6:9d:02:32:fa:8a:08:1d:99:a2:a7:23:54:60:48:e5:39:fb:
2c:6d:78:09:c5:6e:23:f0:22:c1:78:63:24:ce:a9:b6:cd:88:
6c:0b:1a:00:3f:e3:a9:8a:24:fe:27:77:a2:0a:9a:14:db:74:
ce:79:3a:12:7c:11:16:c0:fa:a0:04:fd:c0:5d:d0:3f:15:1d:
6f:5a:0e:ed:98:24:9b:fb:95:87:32:c9:f1:a6:60:71:6b:a5:
67:92:fa:87:49:a4:cf:b4:c4:fc:0b:a3:c1:4d:30:f2:87:90:
78:a7:7e:15:a8:5b:4b:a0:ba:23:90:e4:15:a0:6f:ba:70:0f:
eb:17:f8:48:e1:b6:39:1f:f8:47:9b:97:98:68:09:fe:3b:4b:
b5:58:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org